Predicate Offences: Fraud, Cyber and Environmental Crime

Why This Topic Matters

Money laundering does not exist in a vacuum. Every laundering scheme begins with a predicate offence — the underlying crime that generates the dirty money. If there is no predicate offence, there are no criminal proceeds, and therefore no money laundering. For this reason, the CAMS exam expects candidates to understand not only how laundering works, but also where the money comes from and how different crime types shape the red flags, typologies, and controls an AML professional must apply.

Historically, AML regimes focused narrowly on drug trafficking. Today, the FATF Recommendations require countries to apply the crime of money laundering to all serious offences, with a view to including the widest range of predicate offences. FATF lists 21 designated categories of offences, and three categories that have grown dramatically in importance are fraud, cybercrime, and environmental crime. Fraud now generates some of the largest illicit proceeds globally; cybercrime has become the fastest-growing predicate; and environmental crime, which FATF estimates generates up to USD 281 billion annually, is one of the most profitable and least prosecuted criminal enterprises in the world.

Understanding these offences is important for three practical reasons:
1. Risk assessment — institutions must identify which predicate offences are most relevant to their customers, products, and geographies.
2. Transaction monitoring — detection scenarios must be tuned to the typologies these crimes produce.
3. Suspicious activity reporting — compliance professionals must recognise the signs of the underlying crime, not just the laundering layer.

What Is a Predicate Offence?

A predicate offence is a crime whose proceeds, when subsequently concealed, converted, or integrated into the financial system, give rise to the separate crime of money laundering. Key points candidates must know:

• Countries adopt different approaches: an all-crimes approach (any criminal offence qualifies), a threshold approach (offences above a certain penalty level), a list approach (specifically enumerated crimes), or a combination.
• FATF Recommendation 3 states that countries should apply the ML offence to all serious offences and, at a minimum, include the 21 designated categories.
• The FATF designated categories include, among others: participation in organised crime; terrorism and terrorist financing; trafficking in human beings and migrant smuggling; sexual exploitation; illicit trafficking in narcotics; illicit arms trafficking; corruption and bribery; fraud; counterfeiting currency; counterfeiting and piracy of products; environmental crime; murder; kidnapping; robbery or theft; smuggling; tax crimes; extortion; forgery; piracy; and insider trading and market manipulation.
• Cybercrime is not a separate FATF category by name, but cyber-enabled crimes fall under fraud, extortion (ransomware), theft, and other categories. Many jurisdictions have expressly criminalised cyber offences as predicates.
• Foreign predicate offences: under FATF standards, predicate offences should extend to conduct that occurred in another country and would have been an offence had it occurred domestically (the dual criminality principle).
• Self-laundering: many jurisdictions allow a person to be convicted of both the predicate offence and the laundering of its proceeds, though some legal systems (those following fundamental principles of domestic law) do not.
• A conviction for the predicate offence is generally not required to prove money laundering; it is sufficient to prove the property was derived from criminal conduct.

Part One: Fraud as a Predicate Offence

Fraud is the intentional deception of a person or entity to obtain money, property, or an unlawful advantage. It is one of the most common predicate offences encountered by financial institutions because fraud proceeds almost always pass through the banking or payments system.

Major fraud typologies

• Investment fraud and Ponzi schemes: Promises of high, consistent returns; new investor money used to pay earlier investors. Red flags include guaranteed returns, unregistered securities, and funds flowing through a single collection account to many unrelated payers.
• Advance-fee fraud: Victims pay upfront fees for a promised benefit (inheritance, loan, lottery) that never materialises. Often involves cross-border wires to accounts in unrelated jurisdictions.
• Business Email Compromise (BEC): Criminals impersonate executives or suppliers to redirect legitimate payments. Overlaps strongly with cybercrime. Red flags: sudden changes in beneficiary bank details, urgent payment requests, slightly altered email domains.
• Romance scams and social engineering: Victims are manipulated into sending money or acting as unwitting money mules.
• Credit, loan, and mortgage fraud: Falsified income, inflated appraisals, straw buyers, and identity misuse.
• Insurance fraud: Staged losses, inflated claims, and early surrender of single-premium policies to launder funds.
• Procurement and invoice fraud: Fake or inflated invoices, phantom vendors, and kickbacks — frequently linked to corruption.
• Tax fraud and VAT carousel (missing trader) fraud: Goods traded rapidly across borders to reclaim VAT never paid.
• Identity theft and synthetic identity fraud: Real and fabricated data combined to create new identities that pass onboarding checks.
• Elder financial exploitation: Abuse of trust by caregivers, family members, or scammers targeting vulnerable persons.
• Pandemic and government-relief fraud: Fraudulent applications for emergency loans and benefits, often laundered through newly opened accounts.

How fraud proceeds are laundered

Fraud is distinctive because the victim often sends the money voluntarily (though deceived), so the funds enter the system looking legitimate. Launderers then rely on:
• Money mules — individuals who receive and forward funds, often recruited through job scams or romance scams. Mule accounts show rapid pass-through activity inconsistent with the customer's profile.
• Rapid layering — funds moved within hours across multiple accounts, jurisdictions, and payment rails (wires, instant payments, crypto exchanges, prepaid cards).
• Shell and front companies — to receive victim payments under plausible commercial names.
• Conversion to virtual assets or gift cards — to break the audit trail.

Fraud and AML — the convergence trend

Regulators increasingly expect institutions to integrate fraud and AML functions (sometimes called FRAML). Fraud teams detect the victimisation; AML teams detect the proceeds. Sharing data between them improves both detection and SAR quality. The exam may test your understanding that a fraud loss to a customer may simultaneously be a money laundering red flag for the receiving institution.

Part Two: Cybercrime as a Predicate Offence

Cybercrime encompasses offences committed using computers and networks, either as the tool (cyber-enabled crime, such as online fraud) or as the target (cyber-dependent crime, such as hacking and malware). Its proceeds are overwhelmingly digital, making it a central concern for AML programmes.

Major cybercrime typologies

• Ransomware: Malware encrypts victim systems; criminals demand payment, almost always in virtual assets. Ransomware-as-a-Service (RaaS) models split proceeds between developers and affiliates. Laundering involves mixers/tumblers, chain-hopping, privacy coins, and cashing out through exchanges in weak-regulation jurisdictions or over-the-counter brokers.
• Hacking and data breaches: Theft of credentials, card data, and personal information sold on dark web marketplaces. Proceeds flow through crypto and are often laundered via online gambling or e-commerce fraud.
• Account takeover (ATO): Criminals gain control of legitimate accounts and drain funds or use them as mule accounts.
• Business Email Compromise: Sits at the intersection of fraud and cyber; the FBI consistently ranks it among the highest-loss cybercrimes.
• Phishing, smishing, and vishing: Social engineering to harvest credentials.
• Carding and card-not-present fraud: Stolen card data used for online purchases, with goods resold for cash.
• Cryptojacking and crypto investment scams ("pig butchering"): Victims groomed over time to invest in fake platforms.
• Dark web marketplaces: Sales of drugs, weapons, stolen data, and counterfeit documents, settled in virtual assets.
• Cyber-enabled sanctions evasion and state-sponsored theft: For example, hacking groups linked to sanctioned regimes stealing from exchanges to fund weapons programmes — a critical link between cybercrime and proliferation financing.

How cybercrime proceeds are laundered

• Virtual assets are the dominant medium. Launderers use mixers, tumblers, chain-hopping (converting between coins), decentralised exchanges, privacy coins, and unhosted wallets.
• Money mule networks remain essential to convert digital proceeds into fiat currency.
• Online gambling platforms and in-game currencies are used for layering.
• Prepaid cards and e-wallets allow quick cash-outs.
• Bulletproof hosting and nested exchanges (smaller exchanges operating through accounts at larger ones) obscure the origin of funds.

Regulatory response

FATF extended its standards to Virtual Asset Service Providers (VASPs) in 2019 and introduced the Travel Rule (Recommendation 16) requiring originator and beneficiary information to accompany virtual asset transfers. Many jurisdictions require ransomware payments to be reported, and sanctions authorities have designated mixers and exchanges that facilitate laundering. Institutions are also expected to incorporate cyber-related indicators into SARs, such as IP addresses, wallet addresses, and device identifiers.

Part Three: Environmental Crime as a Predicate Offence

Environmental crime refers to illegal activities that harm the environment and generate profit, including illegal logging, illegal mining, illegal wildlife trade, illegal fishing, and waste trafficking. FATF's 2021 report, Money Laundering from Environmental Crime, highlighted that it is among the most lucrative crime types yet remains under-prioritised by both governments and the private sector. It is explicitly listed among FATF's designated categories of predicate offences.

Major environmental crime typologies

• Illegal logging and timber trafficking: Harvesting protected species or logging without permits, then mixing illegal timber with legal supply chains. Often facilitated by corrupt officials issuing fraudulent permits.
• Illegal mining: Particularly gold mining in regions of South America, Africa, and Asia. Gold is attractive because it is high-value, portable, and can be melted to erase origin. Illegal gold is laundered through refiners, jewellers, and trade-based schemes.
• Illegal wildlife trade (IWT): Trafficking of ivory, rhino horn, pangolin scales, exotic pets, and timber species. FATF's 2020 report on IWT found that proceeds often move through front companies in the import/export sector and are commingled with legitimate trade.
• Illegal, Unreported and Unregulated (IUU) fishing: Often linked to forced labour and document fraud; proceeds laundered through flag-of-convenience vessels and offshore companies.
• Waste trafficking: Illegal export and dumping of hazardous and electronic waste, often misdeclared as recyclable material.
• Carbon credit and environmental market fraud: Fictitious or double-counted credits sold to investors.

Key characteristics of environmental crime laundering

• Convergence with other crimes: Environmental crime is closely linked to corruption (bribing officials for permits), fraud (falsified certificates of origin), tax evasion, forced labour, and organised crime, including drug trafficking groups diversifying into mining and logging.
• Trade-based money laundering (TBML): Illegal commodities are laundered by mixing them with legal goods, misdeclaring species or quantities, and over- or under-invoicing.
• Shell companies and intermediaries: Proceeds flow through import/export firms, logistics companies, and traders in jurisdictions with weak oversight.
• Cash intensity at source: Payments to local harvesters and miners are often in cash, with proceeds later placed through regional banks, bureaux de change, or gold dealers.
• Low detection rates: Many institutions lack expertise to recognise environmental crime indicators, and few jurisdictions prioritise financial investigations alongside environmental enforcement.

Red flags for environmental crime

• Customers in forestry, mining, fishing, or wildlife-related sectors operating in high-risk source regions.
• Trade documentation showing mismatched species, weights, or values; vague descriptions such as "wood products" or "natural specimens".
• Payments to or from jurisdictions known for illegal extraction with no evident commercial rationale.
• Gold or precious metals dealers with unexplained volumes or sources.
• Shipping routes inconsistent with declared origin, or use of transit hubs known for wildlife trafficking.
• Frequent cash deposits by businesses in extraction sectors, structured just below reporting thresholds.

FATF's recommended response

FATF urges countries to treat environmental crime as a priority in national risk assessments, to pursue parallel financial investigations alongside environmental prosecutions, to strengthen cooperation between environmental agencies, FIUs, and customs, and to encourage private-sector awareness. Institutions should incorporate environmental crime into their enterprise-wide risk assessments, particularly if they serve extractive industries or trade finance clients.

How It All Fits Together

Across fraud, cyber, and environmental crime, several unifying themes emerge that the exam frequently tests:

1. Convergence: Modern crime types overlap. BEC is both fraud and cybercrime. Illegal mining involves corruption, fraud, and TBML. Ransomware intersects with sanctions and proliferation financing.
2. Money mules and shell companies appear in virtually every typology.
3. Virtual assets are increasingly the medium of choice for cyber-related proceeds and are growing in fraud and even environmental crime.
4. Trade-based laundering is the primary mechanism for commodity-based crimes.
5. Risk-based approach: Institutions must assess which predicates are most relevant to their business and tune controls accordingly.
6. SAR quality: The most useful reports describe the suspected underlying crime, not merely "unusual activity".

Exam Tips: Answering Questions on Predicate Offences: Fraud, Cyber and Environmental Crime

1. Know the FATF framework cold. Remember that FATF requires the ML offence to cover all serious offences and specifies 21 designated categories. Fraud and environmental crime are named categories; cybercrime is tested through its constituent offences (fraud, extortion, theft). If a question asks which approach FATF requires, the answer centres on "all serious offences" and the designated categories — not a single fixed list of only those 21.

2. Understand that a predicate conviction is not required. A common exam distractor suggests that money laundering cannot be charged without first convicting someone of the predicate offence. In most jurisdictions and under FATF standards, it is sufficient to prove the funds were criminal proceeds.

3. Recognise foreign predicates and dual criminality. If a scenario involves proceeds from conduct abroad, ask whether it would be a crime domestically. If yes, it qualifies as a predicate.

4. Identify the crime behind the red flag. Scenario questions describe a transaction pattern and ask what it most likely indicates. Train yourself to map patterns to predicates: rapid pass-through by an individual with a new job offer = money mule for fraud/cyber; changed beneficiary details with urgent wire = BEC; crypto payment to a newly created wallet after a service disruption = ransomware; import/export of vaguely described timber from a high-risk region with mismatched invoices = environmental crime via TBML.

5. Choose the most complete and risk-based answer. CAMS questions often offer several plausible actions. The best answer typically reflects the risk-based approach, escalation to the compliance officer, documentation, and filing a SAR where appropriate — rather than immediately closing the account, confronting the customer, or taking no action. Remember that tipping off is prohibited.

6. Pay attention to the convergence angle. If a question mentions corruption of officials together with natural resources, think environmental crime linked to bribery. If it mentions a sanctioned jurisdiction and stolen crypto, think cyber theft linked to proliferation financing. Examiners reward candidates who see the connections.

7. Know the virtual asset vocabulary. Be comfortable with terms such as VASP, Travel Rule, mixer/tumbler, chain-hopping, privacy coin, unhosted wallet, and nested exchange. Questions on cyber-related laundering frequently use these terms.

8. Remember the two FATF environmental reports. The 2020 report on Illegal Wildlife Trade and the 2021 report on Money Laundering from Environmental Crime are authoritative sources. Key takeaways: environmental crime is among the most profitable crime types, is under-detected, relies heavily on shell companies and trade-based laundering, and requires parallel financial investigations.

9. Distinguish victims from launderers. In fraud scenarios, the customer sending money may be a victim rather than a criminal. The correct response may involve protecting the customer and reporting the receiving account's activity, not treating the victim as a suspect. Conversely, a mule who claims ignorance may still be reportable.

10. Read every word of the scenario. Details such as the customer's stated occupation, the jurisdiction, the type of goods, the payment method, and the speed of movement are deliberate clues. The answer usually depends on the inconsistency between the customer's profile and the observed behaviour.

11. Eliminate absolutes. Answers containing words like "always", "never", or "all transactions must be blocked" are usually wrong. AML is risk-based and contextual.

12. Practise explaining the laundering flow. For each predicate, be able to describe in one sentence how proceeds are placed, layered, and integrated. Fraud: victim payment → mule accounts → rapid onward transfer → crypto or cash. Cyber: crypto ransom → mixer → chain-hop → exchange cash-out. Environmental: cash at source → front company → mislabelled export → commingled trade revenue. This mental model will help you answer any scenario quickly and accurately.

Summary

Predicate offences are the foundation of every money laundering case. Fraud generates vast proceeds that enter the system disguised as legitimate payments; cybercrime exploits digital channels and virtual assets to steal and launder at speed; environmental crime quietly produces hundreds of billions in illicit profit through corruption and trade-based schemes. A CAMS-certified professional must understand each offence's typologies, red flags, laundering methods, and regulatory context — and must be able to apply the risk-based approach to detect, escalate, and report. Master the FATF framework, learn to connect transaction patterns to underlying crimes, and approach exam scenarios methodically, and you will handle this topic with confidence.